AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-17199

HIGH · CVSS 7.5 EPSS 20.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-01-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-17199
Severity
HIGH
CVSS
7.5
EPSS
20.68%
Apache

Original NVD Description

In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.